---
updatedAt: 2025-12-15T13:11:50.000Z
agentTools:
  projectIndex: https://cloud.docs.tamr.com/llms.txt
---

# Configuring Single Sign-on with Okta

Before configuring SSO with Okta, contact Tamr Support (<help@tamr.com>) for the following information:

* Identifier (Entity ID).  This value begins with the string `urn:auth0:`.
* Reply URL (Assertion Consumer Service URL)
* Sign on URL. Note that this value is the same as the Reply URL.

After configuring SSO with Okta, send the following information to Tamr Support:

* Certificate (Base64)
* Login URL

**To configure SSO with Okta:**

1. Sign in to your Okta admin portal.
2. In the left menu bar, select **Applications**.

   ![](https://files.readme.io/7c60f48574711274b2cae8c7546a3598a6947fae0c8349194ee610f384c0d4dc-image.png)
3. Select **Create App Integration**.

   ![](https://files.readme.io/f53a37ea9f30b1db6c67a0b30c6914f0494695abf182108946095ec2e1c02625-image.png)
4. Select **SAML 2.0** and then select **Next**.

   ![](https://files.readme.io/33e73eb6573ddf46ce795dc1329319abd55eb57b6ca25f73594cfe0f7541cc35-image.png)
5. Enter an **App name** and add an **App logo** (optional).

   Enable the **Do not display application icon** App Visibility option to hide application tile from users in Okta dashboard; Tamr does not support IdP-initiated login.\
   Select **Next**.

   ![](https://files.readme.io/66691ff585f60eddcac9382f358bcd09943cb887985e254255d4c5d811a5df49-image.png)
6. Set the values for **Single sign-on URL** and **Audience URI (SP Entity ID)** in **SAML Settings**.

   Enable the **Use this for Recipient URL and Destination URL** option.

   Leave the rest of the settings to their default values.

   ![](https://files.readme.io/ac5776ef713431f67ab92cae9a7c39e1f536b64dfd661bb320f8fdd3af2cff83-image.png)
7. Add the following **Attribute Statements**.

   1. email: user.email
   2. user\_id: user.email
   3. family\_name: user.lastName
   4. given\_name: user.firstName
   5. name: user.firstName + " " + user.lastName

      ![](https://files.readme.io/345ab9e635875b748eede146b4b5a544c6e320cc34d53e8f1a5687684b810385-image.png)
8. Select **Next**.
9. Set the **App type** to **This is an internal app that we have created** and select **Finish**.

   ![](https://files.readme.io/874c3d9249200eed2f32fc58cd3cba98d8c47c80c8e9b4e75b739861befa0aae-image.png)

   ![](https://files.readme.io/e8a298594440c15f755e3f005659d1a113a9bac364b3585d7ada4de2203152d9-image.png)
10. Send either of the following to Tamr Support (<help@tamr.com>) to complete the SSO confiugration:

    1. Copy the **Metadata URL** on the **Sign On** tab and send to Tamr.

       ![](https://files.readme.io/8ec4e049cf0a2f2d73c0a94f5bf67b8065c50ae9941e9e667f194100fa9029a9-image.png)
    2. Select **View SAML Setup Instructions** and send the **Identity Provider Single Sign-On URL** and **X.509 Certificate** to Tamr.

![](https://files.readme.io/49552dbede8be83eaaaa40a31b0f66650dcab5326223ca98f8ea1f72b51082a3-image.png)